All Apps and Add-ons

uberAgent: Why don't I see any disk utilization parameter being reported?

stanwin
Contributor

HI

For my uberAgent setup, I don't see any Disk utilization parameter being reported. By utilization, I mean % free or used space on Disks .

I see on the Uberagent website:

Machine
The following metrics are collected per machine:

  • Disk utilization in percent

However, I don't see it under Uberagent's own related Splunk Events listing:

Source type:
uberAgent:System:SystemPerformanceSummary
Field list:
CPUUsagePercent, RAMUsagePercent, RAMUsageGB, IOPSRead, IOPSWrite, IOCountRead, IOCountWrite, IOMBRead, IOMBWrite, IOLatencyMsRead, IOLatencyMsWrite, IOPercentDiskTime, NetUtilizationPercent, KernelPagedMB, KernelNonPagedMB, HandleCount, ThreadCount
0 Karma
1 Solution

helge
Builder

uberAgent does not collect information about disk space usage. That is available via Splunk's Universal Forwarder.

When the documentation talks about "disk utilization" it refers to the disk's performance, i.e. how much of the time the disk is busy. The underlying field is called IOPercentDiskTime.

View solution in original post

helge
Builder

uberAgent does not collect information about disk space usage. That is available via Splunk's Universal Forwarder.

When the documentation talks about "disk utilization" it refers to the disk's performance, i.e. how much of the time the disk is busy. The underlying field is called IOPercentDiskTime.

stanwin
Contributor

Right thanks helge!

Since we already have uberagent, didnt want to add single perfmon input for the same.

Thanks for the confirmation!

Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...